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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A method of authorising data transfer to or 
from a mobile node temporarily connected to an attachment point of a network, 
the attachment point having a fon^/arding node associated therewith for 
forwarding messages to or from the mobile node, the method including the steps 
of: 

(a) receiving a digital certificate from the fonA^arding node, which 
certificate includes a message body and a digital signature for verifying the 
content of the message body, the message body having geographical 
information therein, which geographical information is derived from a physical 
location; 

(b) performing a comparison between the geographical information of 
the certificate and other a furth e r i t e m of geograph i ca l Information; and, 

(c) making an authorisation decision for data transfer to or from the 
mobile node in dependence on the result of the comparison. 

2. (Currently Amended) A method as claimed in claim 1, cla i m 1 , 
wherein the digital certificate is suitable for use in a public key encryption svstem. 
system 
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3. (Currently Amended) A method as claimed in claim 2, wherein the 
certificate is generated at a certificating node having a public key and a private 
key associated therewith, and wherein the signature is a function, at least in part, 
of the private key of the certificate node. G e rt i f i cat e node 

4. (Previously Presented) A method as claimed in claim 2, including 
the step of verifying the authenticity of the digital certificate by performing a 
computation on at least part of certificate, the computation involving the public 
key associated with the certificate node. 

5. (Previously Presented) A method as claimed in claim 1 , wherein 
the mobile node has a certificate associated therewith, which certificate includes 
geographical infonnation, the method including the further step of receiving the 
certificate from the mobile node, and using the geographical information from the 
certificate of the mobile node to make the authorisation decision. 

6. (Currently Amended) A method as claimed in claim 1. any of tho 
proood i ng c l a i ms, w herein a registration procedure is performed to allow data 
transfer between the forwarding node and the mobile node, and wherein the 
registration procedure includes the steps of: receiving, at the forwarding node, a 
certificate with geographical information therein; and, comparing the received 
geographical infomiation with other a further i tem of goograph i ca l infonnation. 
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7. (Currently Amended) A method as claimed In claim 1 , wherein the 
geographical Infonnatlon in the certificate associated with the fonA^arding node is 
derived from the physical location of the fon^/arding node, forward i ng nodo 

8. (Previously Presented) A method as claimed in claim 1 , wherein 
the mobile node has a temporary address and a permanent address associated 
therewith. 

9. (Original) A method as claimed in claim 8, wherein the temporary 
address of the mobile node is indicative of the topological position of the current 
point of attachment of the mobile node. 

10. (Previously Presented) A method as claimed in claim 8, including 
the steps of: (i) intercepting packets addressed to the permanent address of the 
mobile node; and, (ii) fonA^arding the intercepted packets towards the temporary 
address of mobile node, at least one of steps (i) and (ii) being authorised in 
dependence on the result of a comparison involving geographic infomnation 
within a certificate. 

1 1 . (Previously Presented) A method as claimed in claim 1 , wherein 
the forwarding node is a fixed node. 
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12. (Previously Presented) A method as claimed in claim 1 , including 
an authentication step. 

1 3. (Currently Amended) A network node for authorising the transfer 
of data to a mobile node temporarily connected to a fonA/arding node, wherein the 
network node is configured, in response to receiving a digital certificate from the 
foHA^arding node, to read at least part of the digital certificate, the digital certificate 
including geographical information derived from a physical location, and wherein 
the network node is further configured to: perform a comparison between the 
geographical information of the certificate and other a furthor itom of 
geograph i ca l information; and, in dependence on the result of the comparison, 
make an authorisation decision. 

14. (Currently Amended) A method of authorising data transfer to or 
from a mobile node using a digital certificate, wherein the digital certificate 
includes a message body, a digital signature for verifying the content of the 
message body, the message body having geographical information derived from 
a physical location, the method including the steps of: receiving the digital 
certificate from the mobile node; performing a comparison between the 
geographical information of the certificate and other a furth e r it e m of 
g e ographical information; and, making an authorisation decision in dependence 
on the result of the comparison. 
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15. (Original) A method as claimed in claim 14, wherein the mobile 
node is configured to fomn a temporary attachment to an attachment point of a 
main network, and wherein the digital certificate is received at a network node in 
the main network. 

16. (Original) A method as claimed in claim 15, wherein the 
attachment point has a forwarding node associated therewith for fonA^arding 
messages to and/or from the mobile node, and wherein the forwarding node has 
a digital certificate associated therewith, which certificate include geographical 
information derived from the physical location of the forwarding node, the method 
including the steps of: at the network node, receiving the digital certificate from 
the foHA/arding node; and, making an authorisation decision in dependence on 
the geographical information of the certificate from the fon^^arding node. 
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